High USN-7509-1 1 CVE

dotnet8, dotnet9 vulnerability

Published May 16, 2025 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that .NET did not properly handle file names and paths
under certain conditions. An attacker could possibly use this issue to
perform spoofing over a network.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · 22.04 LTS 22.04:LTS	dotnet8	8.0.116-8.0.16-0ubuntu1~22.04.1
Ubuntu · 24.04 LTS 24.04:LTS	dotnet8	8.0.116-8.0.16-0ubuntu1~24.04.1

Vulnerabilities 1

High 8.0

CVE-2025-26646

.NET, Visual Studio, and Build Tools for Visual Studio Spoofing Vulnerability

External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network.

Microsoft Microsoft Visual Studio 2022 version 17.8 Microsoft Visual Studio 2022 version 17.12 .NET 8.0 Ubuntu Alpine Wolfi NuGet

May 13, 2025

References

report
https://ubuntu.com/security/CVE-2025-26646